CVE-2020-4030CWE-125

OOB read in `TrioParse` in FreeRDP

Low · published June 22, 2020

CVSS v3.1
3.5
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01659 · 76.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-06-22T00:00Z
EPSS history
Timeline
  • 22 JUN 00:00Z
    OOB read in `TrioParse` in FreeRDP
    cvelistv5